hello, thanks for your answer. how i can make a static key for each client ? what's the client and server config? any artical or book can help me? thanks.

hi there, read this (taken from http://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html) [quote]Example 2: A tunnel with static-key security (i.e. using a pre-shared secret) First build a static key on may. openvpn --genkey --secret key This command will build a random key file called key (in ascii format). Now copy key to june over a secure medium such as by using the scp(1) program. On may: openvpn --remote june.kg --dev tun1 --ifconfig 10.4.0.1 10.4.0.2 --verb 5 --secret key On june: openvpn --remote may.kg --dev tun1 --ifconfig 10.4.0.2 10.4.0.1 --verb 5 --secret key Now verify the tunnel is working by pinging across the tunnel. On may: ping 10.4.0.2 On june: ping 10.4.0.1 [/quote] also read http://openvpn.net/index.php/open-source/documentation/howto.html Michael.

hello, as i test it before this way will make only one tunel i cant see route all trafic througe the tun card without getway. so any suggest? thanks.

what exactly are you trying to achieve? btw there are many examples in the documentation section.. Michael.

hello, regarding documentation the statickey use in gerneral for site to site, in my case i have to use this way to make the connection througe this way but i have many clients to one server. regding the confige above i have only one static ip for the client? so can i make it as dhcp? regarding the config above i dont have a getway that assign to tun adapter so i have to assigen it. thanks.

you can setup openvpn server using certificates for authenticating your clients also the server directive is what you are looking for... please read the documentation. Michael.

hello, thanks for your answer, but as u see above my problem is with tls ! mean if i use the certifcate i have to use tls and this is my problem so in my case i have to use static key to not use tls. thanks.

hi there, [quote]but as u see above my problem is with tls ! [/quote] just curious...where exactly do you mention this? you can also use multiple instances of openvpn for your clients (instance -- client) and with different keys.. Michael.

hello, client conf: remote 208.67.18.35 443 dev tun ifconfig 10.8.0.2 10.8.0.1 push "redirect-gateway def1" secret static.key server conf: dev tun port 443 ifconfig 10.8.0.1 10.8.0.2 push "redirect-gateway def1" secret static.key it's work fine, my problem is with default getway how i can make the client have a server default getway so can get the internet from server? thanks.

push/pull does not work in this setup; use this for the client config: [code]remote 208.67.18.35 443 dev tun ifconfig 10.8.0.2 10.8.0.1 redirect-gateway def1 secret static.key[/code]

hello still the same problem if i check my wan ip it's give me my internet ip not the public ip of server. pleae not that i tired: place it on client and server = not work place it on client = not work place it on server = not work thanks.

conf

janjust

pam is easier as you can use the system users; the username+password on the client side cannot easily be saved, they need to be entered every time the VPN client starts (on Windows).

globaltech

so the pam can save right ?
thanks.

globaltech

hello,
i tired first with this configration before using pam:
server:

port 20
proto tcp-server
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 8

client:

client
dev tun
proto tcp
remote 208.67.18.35 20
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert vpndiscover01.crt
key vpndiscover01.key
ns-cert-type server
comp-lzo
verb 5

i get this log:

Wed Mar 14 16:45:14 2012 us=594000 Current Parameter Settings:
Wed Mar 14 16:45:14 2012 us=594000 config = 'client.ovpn'
Wed Mar 14 16:45:14 2012 us=594000 mode = 0
Wed Mar 14 16:45:14 2012 us=594000 show_ciphers = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 show_digests = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 show_engines = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 genkey = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 key_pass_file = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 show_tls_ciphers = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 Connection profiles [default]:
Wed Mar 14 16:45:14 2012 us=594000 proto = tcp-client
Wed Mar 14 16:45:14 2012 us=594000 local = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 local_port = 0
Wed Mar 14 16:45:14 2012 us=594000 remote = '208.67.18.35'
Wed Mar 14 16:45:14 2012 us=594000 remote_port = 20
Wed Mar 14 16:45:14 2012 us=594000 remote_float = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 bind_defined = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 bind_local = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 connect_retry_seconds = 5
Wed Mar 14 16:45:14 2012 us=594000 connect_timeout = 10
Wed Mar 14 16:45:14 2012 us=594000 connect_retry_max = 0
Wed Mar 14 16:45:14 2012 us=594000 socks_proxy_server = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 socks_proxy_port = 0
Wed Mar 14 16:45:14 2012 us=594000 socks_proxy_retry = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 Connection profiles END
Wed Mar 14 16:45:14 2012 us=594000 remote_random = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 ipchange = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 dev = 'tun'
Wed Mar 14 16:45:14 2012 us=594000 dev_type = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 dev_node = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 lladdr = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 topology = 1
Wed Mar 14 16:45:14 2012 us=594000 tun_ipv6 = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 ifconfig_local = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 ifconfig_remote_netmask = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 ifconfig_noexec = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 ifconfig_nowarn = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 shaper = 0
Wed Mar 14 16:45:14 2012 us=594000 tun_mtu = 1500
Wed Mar 14 16:45:14 2012 us=594000 tun_mtu_defined = ENABLED
Wed Mar 14 16:45:14 2012 us=594000 link_mtu = 1500
Wed Mar 14 16:45:14 2012 us=594000 link_mtu_defined = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 tun_mtu_extra = 0
Wed Mar 14 16:45:14 2012 us=594000 tun_mtu_extra_defined = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 fragment = 0
Wed Mar 14 16:45:14 2012 us=594000 mtu_discover_type = -1
Wed Mar 14 16:45:14 2012 us=594000 mtu_test = 0
Wed Mar 14 16:45:14 2012 us=594000 mlock = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 keepalive_ping = 0
Wed Mar 14 16:45:14 2012 us=594000 keepalive_timeout = 0
Wed Mar 14 16:45:14 2012 us=594000 inactivity_timeout = 0
Wed Mar 14 16:45:14 2012 us=594000 ping_send_timeout = 0
Wed Mar 14 16:45:14 2012 us=594000 ping_rec_timeout = 0
Wed Mar 14 16:45:14 2012 us=594000 ping_rec_timeout_action = 0
Wed Mar 14 16:45:14 2012 us=594000 ping_timer_remote = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 remap_sigusr1 = 0
Wed Mar 14 16:45:14 2012 us=594000 explicit_exit_notification = 0
Wed Mar 14 16:45:14 2012 us=594000 persist_tun = ENABLED
Wed Mar 14 16:45:14 2012 us=594000 persist_local_ip = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 persist_remote_ip = DISABLED
Wed Mar 14 16:45:14 2012 us=594000 persist_key = ENABLED
Wed Mar 14 16:45:14 2012 us=594000 mssfix = 1450
Wed Mar 14 16:45:14 2012 us=594000 resolve_retry_seconds = 1000000000
Wed Mar 14 16:45:14 2012 us=594000 username = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 groupname = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 chroot_dir = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 cd_dir = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=594000 writepid = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=952000 up_script = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=968000 down_script = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=968000 down_pre = DISABLED
Wed Mar 14 16:45:14 2012 us=968000 up_restart = DISABLED
Wed Mar 14 16:45:14 2012 us=968000 up_delay = DISABLED
Wed Mar 14 16:45:14 2012 us=968000 daemon = DISABLED
Wed Mar 14 16:45:14 2012 us=968000 inetd = 0
Wed Mar 14 16:45:14 2012 us=968000 log = DISABLED
Wed Mar 14 16:45:14 2012 us=984000 suppress_timestamps = DISABLED
Wed Mar 14 16:45:14 2012 us=984000 nice = 0
Wed Mar 14 16:45:14 2012 us=984000 verbosity = 5
Wed Mar 14 16:45:14 2012 us=984000 mute = 0
Wed Mar 14 16:45:14 2012 us=984000 gremlin = 0
Wed Mar 14 16:45:14 2012 us=984000 status_file = '[UNDEF]'
Wed Mar 14 16:45:14 2012 us=984000 status_file_version = 1
Wed Mar 14 16:45:14 2012 us=984000 status_file_update_freq = 60
Wed Mar 14 16:45:14 2012 us=999000 occ = ENABLED
Wed Mar 14 16:45:14 2012 us=999000 rcvbuf = 0
Wed Mar 14 16:45:14 2012 us=999000 sndbuf = 0
Wed Mar 14 16:45:14 2012 us=999000 sockflags = 0
Wed Mar 14 16:45:14 2012 us=999000 fast_io = DISABLED
Wed Mar 14 16:45:14 2012 us=999000 lzo = 7
Wed Mar 14 16:45:15 2012 us=15000 route_script = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=15000 route_default_gateway = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=15000 route_default_metric = 0
Wed Mar 14 16:45:15 2012 us=15000 route_noexec = DISABLED
Wed Mar 14 16:45:15 2012 us=15000 route_delay = 5
Wed Mar 14 16:45:15 2012 us=15000 route_delay_window = 30
Wed Mar 14 16:45:15 2012 us=15000 route_delay_defined = ENABLED
Wed Mar 14 16:45:15 2012 us=30000 route_nopull = DISABLED
Wed Mar 14 16:45:15 2012 us=30000 route_gateway_via_dhcp = DISABLED
Wed Mar 14 16:45:15 2012 us=30000 max_routes = 100
Wed Mar 14 16:45:15 2012 us=30000 allow_pull_fqdn = DISABLED
Wed Mar 14 16:45:15 2012 us=30000 management_addr = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=30000 management_port = 0
Wed Mar 14 16:45:15 2012 us=30000 management_user_pass = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=46000 management_log_history_cache = 250
Wed Mar 14 16:45:15 2012 us=46000 management_echo_buffer_size = 100
Wed Mar 14 16:45:15 2012 us=46000 management_write_peer_info_file = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=46000 management_client_user = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=46000 management_client_group = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=46000 management_flags = 0
Wed Mar 14 16:45:15 2012 us=62000 shared_secret_file = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=62000 key_direction = 0
Wed Mar 14 16:45:15 2012 us=62000 ciphername_defined = ENABLED
Wed Mar 14 16:45:15 2012 us=62000 ciphername = 'BF-CBC'
Wed Mar 14 16:45:15 2012 us=62000 authname_defined = ENABLED
Wed Mar 14 16:45:15 2012 us=62000 authname = 'SHA1'
Wed Mar 14 16:45:15 2012 us=77000 prng_hash = 'SHA1'
Wed Mar 14 16:45:15 2012 us=77000 prng_nonce_secret_len = 16
Wed Mar 14 16:45:15 2012 us=77000 keysize = 0
Wed Mar 14 16:45:15 2012 us=77000 engine = DISABLED
Wed Mar 14 16:45:15 2012 us=77000 replay = ENABLED
Wed Mar 14 16:45:15 2012 us=77000 mute_replay_warnings = DISABLED
Wed Mar 14 16:45:15 2012 us=77000 replay_window = 64
Wed Mar 14 16:45:15 2012 us=93000 replay_time = 15
Wed Mar 14 16:45:15 2012 us=93000 packet_id_file = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=93000 use_iv = ENABLED
Wed Mar 14 16:45:15 2012 us=93000 test_crypto = DISABLED
Wed Mar 14 16:45:15 2012 us=93000 tls_server = DISABLED
Wed Mar 14 16:45:15 2012 us=93000 tls_client = ENABLED
Wed Mar 14 16:45:15 2012 us=108000 key_method = 2
Wed Mar 14 16:45:15 2012 us=108000 ca_file = 'ca.crt'
Wed Mar 14 16:45:15 2012 us=108000 ca_path = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=108000 dh_file = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=108000 cert_file = 'vpndiscover01.crt'
Wed Mar 14 16:45:15 2012 us=108000 priv_key_file = 'vpndiscover01.key'
Wed Mar 14 16:45:15 2012 us=108000 pkcs12_file = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=124000 cryptoapi_cert = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=124000 cipher_list = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=124000 tls_verify = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=124000 tls_export_cert = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=124000 tls_remote = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=124000 crl_file = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=124000 ns_cert_type = 64
Wed Mar 14 16:45:15 2012 us=140000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=140000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=140000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=140000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=140000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=140000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=140000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=140000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=155000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=155000 remote_cert_ku = 0
Wed Mar 14 16:45:15 2012 us=155000 remote_cert_ku[i] = 0
Wed Mar 14 16:45:15 2012 us=155000 remote_cert_ku[i] = 0
Wed Mar 14 16:45:15 2012 us=155000 remote_cert_ku[i] = 0
Wed Mar 14 16:45:15 2012 us=155000 remote_cert_ku[i] = 0
Wed Mar 14 16:45:15 2012 us=155000 remote_cert_ku[i] = 0
Wed Mar 14 16:45:15 2012 us=155000 remote_cert_ku[i] = 0
Wed Mar 14 16:45:15 2012 us=171000 remote_cert_eku = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=171000 tls_timeout = 2
Wed Mar 14 16:45:15 2012 us=171000 renegotiate_bytes = 0
Wed Mar 14 16:45:15 2012 us=171000 renegotiate_packets = 0
Wed Mar 14 16:45:15 2012 us=171000 renegotiate_seconds = 3600
Wed Mar 14 16:45:15 2012 us=171000 handshake_window = 60
Wed Mar 14 16:45:15 2012 us=171000 transition_window = 3600
Wed Mar 14 16:45:15 2012 us=186000 single_session = DISABLED
Wed Mar 14 16:45:15 2012 us=186000 push_peer_info = DISABLED
Wed Mar 14 16:45:15 2012 us=186000 tls_exit = DISABLED
Wed Mar 14 16:45:15 2012 us=186000 tls_auth_file = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=186000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=186000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=186000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=202000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=202000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=202000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=202000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=202000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=202000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=202000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=202000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=218000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=218000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=218000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=218000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=218000 pkcs11_protected_authentication = DISABLED
Wed Mar 14 16:45:15 2012 us=218000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=218000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=218000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=233000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=233000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=233000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=233000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=233000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=233000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=233000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=233000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=249000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=249000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=249000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=249000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=249000 pkcs11_private_mode = 00000000
Wed Mar 14 16:45:15 2012 us=249000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=249000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=249000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=264000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=264000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=264000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=264000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=264000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=264000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=264000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=264000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=280000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=280000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=280000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=280000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=280000 pkcs11_cert_private = DISABLED
Wed Mar 14 16:45:15 2012 us=280000 pkcs11_pin_cache_period = -1
Wed Mar 14 16:45:15 2012 us=280000 pkcs11_id = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=280000 pkcs11_id_management = DISABLED
Wed Mar 14 16:45:15 2012 us=296000 server_network = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=296000 server_netmask = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=296000 server_bridge_ip = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=296000 server_bridge_netmask = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=296000 server_bridge_pool_start = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=296000 server_bridge_pool_end = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=311000 ifconfig_pool_defined = DISABLED
Wed Mar 14 16:45:15 2012 us=311000 ifconfig_pool_start = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=311000 ifconfig_pool_end = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=311000 ifconfig_pool_netmask = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=311000 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=311000 ifconfig_pool_persist_refresh_freq = 600
Wed Mar 14 16:45:15 2012 us=311000 n_bcast_buf = 256
Wed Mar 14 16:45:15 2012 us=311000 tcp_queue_limit = 64
Wed Mar 14 16:45:15 2012 us=327000 real_hash_size = 256
Wed Mar 14 16:45:15 2012 us=327000 virtual_hash_size = 256
Wed Mar 14 16:45:15 2012 us=327000 client_connect_script = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=327000 learn_address_script = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=327000 client_disconnect_script = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=327000 client_config_dir = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=342000 ccd_exclusive = DISABLED
Wed Mar 14 16:45:15 2012 us=342000 tmp_dir = 'C:\Users\Aminof\AppData\Local\Temp\'
Wed Mar 14 16:45:15 2012 us=342000 push_ifconfig_defined = DISABLED
Wed Mar 14 16:45:15 2012 us=342000 push_ifconfig_local = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=342000 push_ifconfig_remote_netmask = 0.0.0.0
Wed Mar 14 16:45:15 2012 us=342000 enable_c2c = DISABLED
Wed Mar 14 16:45:15 2012 us=342000 duplicate_cn = DISABLED
Wed Mar 14 16:45:15 2012 us=342000 cf_max = 0
Wed Mar 14 16:45:15 2012 us=342000 cf_per = 0
Wed Mar 14 16:45:15 2012 us=358000 max_clients = 1024
Wed Mar 14 16:45:15 2012 us=358000 max_routes_per_client = 256
Wed Mar 14 16:45:15 2012 us=358000 auth_user_pass_verify_script = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=358000 auth_user_pass_verify_script_via_file = DISABLED
Wed Mar 14 16:45:15 2012 us=358000 ssl_flags = 0
Wed Mar 14 16:45:15 2012 us=358000 client = ENABLED
Wed Mar 14 16:45:15 2012 us=358000 pull = ENABLED
Wed Mar 14 16:45:15 2012 us=374000 auth_user_pass_file = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=374000 show_net_up = DISABLED
Wed Mar 14 16:45:15 2012 us=374000 route_method = 0
Wed Mar 14 16:45:15 2012 us=374000 ip_win32_defined = DISABLED
Wed Mar 14 16:45:15 2012 us=374000 ip_win32_type = 3
Wed Mar 14 16:45:15 2012 us=374000 dhcp_masq_offset = 0
Wed Mar 14 16:45:15 2012 us=374000 dhcp_lease_time = 31536000
Wed Mar 14 16:45:15 2012 us=374000 tap_sleep = 0
Wed Mar 14 16:45:15 2012 us=374000 dhcp_options = DISABLED
Wed Mar 14 16:45:15 2012 us=389000 dhcp_renew = DISABLED
Wed Mar 14 16:45:15 2012 us=389000 dhcp_pre_release = DISABLED
Wed Mar 14 16:45:15 2012 us=389000 dhcp_release = DISABLED
Wed Mar 14 16:45:15 2012 us=389000 domain = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=389000 netbios_scope = '[UNDEF]'
Wed Mar 14 16:45:15 2012 us=389000 netbios_node_type = 0
Wed Mar 14 16:45:15 2012 us=389000 disable_nbt = DISABLED
Wed Mar 14 16:45:15 2012 us=389000 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Mar 14 16:45:15 2012 us=405000 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Mar 14 16:45:15 2012 us=701000 LZO compression initialized
Wed Mar 14 16:45:15 2012 us=701000 Control Channel MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Mar 14 16:45:15 2012 us=701000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Mar 14 16:45:15 2012 us=701000 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:135 ET:0 EL:0 AF:3/1 ]
Wed Mar 14 16:45:15 2012 us=701000 Local Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Mar 14 16:45:15 2012 us=717000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Mar 14 16:45:15 2012 us=717000 Local Options hash (VER=V4): '69109d17'
Wed Mar 14 16:45:15 2012 us=717000 Expected Remote Options hash (VER=V4): 'c0103fa8'
Wed Mar 14 16:45:15 2012 us=717000 Attempting to establish TCP connection with 208.67.18.35:20
Wed Mar 14 16:45:15 2012 us=998000 TCP connection established with 208.67.18.35:20
Wed Mar 14 16:45:15 2012 us=998000 TCPv4_CLIENT link local: [undef]
Wed Mar 14 16:45:15 2012 us=998000 TCPv4_CLIENT link remote: 208.67.18.35:20
Wed Mar 14 16:45:16 2012 us=356000 TLS: Initial packet from 208.67.18.35:20, sid=0153dc69 8890381c
Wed Mar 14 16:46:00 2012 us=739000 read TCPv4_CLIENT: Connection timed out (WSAETIMEDOUT) (code=10060)
Wed Mar 14 16:46:00 2012 us=739000 Connection reset, restarting [-1]
Wed Mar 14 16:46:00 2012 us=739000 TCP/UDP: Closing socket
Wed Mar 14 16:46:00 2012 us=739000 SIGUSR1[soft,connection-reset] received, process restarting
Wed Mar 14 16:46:00 2012 us=754000 Restart pause, 5 second(s)

so where is the problem now? also i tried to make it work on port 3389 but same problem .... this configrations made my cray,
thanks.

globaltech

hello,
i think the problem is becuse my isp is block tls
any way to disable it or bypass it ?
i tired witn many ports but all have the same problem and i confirm that becuse i tried to work from other location it's work fine.
thanks.

globaltech

any suggest please?
thanks.

« Previous Page